Securing The Console Port - Juniper J-Series Administration Manual

12.
13.
14.
15.
16.
17.
18.
19.
20.

Securing the Console Port

You can use the console port on the Services Router to connect to the Routing Engine
through an RJ-45 serial cable. From the console port, you can use the CLI to configure
the router. By default, the console port is enabled. To secure the console port, you
can configure the Services Router to do the following:
At the following prompt, enter
procedure.
Enter full pathname of shell or 'recovery' for root password recovery or
RETURN for /bin/sh: recovery
Enter configuration mode in the CLI.
Set the root password. For example:
user@host# set system root-authentication plain-text-password
For more information about configuring the root password, see the JUNOS System
Basics Configuration Guide.
At the following prompt, enter the new root password. For example:
New password: juniper1
Retype new password:
At the second prompt, reenter the new root password.
If you are finished configuring the network, commit the configuration.
root@host# commit
commit complete
Exit configuration mode in the CLI.
Exit operational mode in the CLI.
At the prompt, enter y to reboot the router.
Reboot the system? [y/n] y
Log out the console session when you unplug the serial cable connected to the
console port.
Disable root login connections to the console.
Disable the console port. We recommend disabling the console port to prevent
unauthorized access to the Services Router, especially when the router is used
as customer premises equipment (CPE).
Chapter 1: Managing User Authentication and Access
to start the root password recovery
recovery

Securing the Console Port

23